← All credits
Pedro Santos
3 vulnerability records and advisories credit this contributor.
CVE-2026-95863
Apache Wicket: XSS via a component id or markup id written unescaped into generated JavaScript and markup
CVE-2026-111089
Apache Wicket: XSS via a resource bundle text written unescaped into generated JavaScript and markup
CVE-2024-53299
Apache Wicket: An attacker can intentionally trigger a memory leak